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(54) Improvements in or relating 
to telephone exchanges 

(57) In a triplicated system whose 
outputs S1, S2, S3 are majority 
voted 1, the majority decision out- 
put is compared 2, 3, 4 with each 
of the original system outputs to 
isolate a fault. Delays are intro- 
duced in the setting of toggles 
17-19 by the fault signals so that 
occasional faults between two con- 
secutive transitions of the majority 
decision output are ignored. How- 
ever, the staticising of detected 
fault conditions in the toggles en- 
ables a persistent fault to be de- 
tected. 

The arrangement is described in 
its application to a processor-con- 
trolled telephone exchange* . 
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SPECIFICATION 

Improvements in or relating to telephone 
exchanges 

5 

This invention relates to an arrangement for 
fault detection and indication in highly secure 
electronic data processing systems. One exam- 
ple of such a system is a processor controlled 

10 automatic telecommunication exchange. 

In highly secure systems it is common prac- 
tice for the critical faults of the system to be 
triplicated, with majority decision operations 
performed on the output signals of these 

1 5 triplicated parts. A disadvantage of many 
known systems of this type is that if one of 
the three security sections fails, that fault 
condition remains dormant as long as the 
other two sections continue to function cor- 

20 rectly. It is then only when a further section 
fails that the faulty condition is detected. 

This invention has for its object the provi- 
sion of a relatively simple circuit which en- 
ables the above disadvantage to be at least 

25 minimised. 

According to the invention there is provided 
a fault detection and indication circuit, which 
includes a majority decision circuit to which 
three nominally identical versions of the same 

30 signal are applied and which given a majority 
decision output in respect of each said signal, 
a set of comparators each of which compares 
the majority decision output with a different 
one of the three versions of the signal, so that 

35 if one of the versions differs from the majority 
decision output then the appropriate one of 
the comparators gives an output which indi- 
cates which version is at fault, a set of output 
toggles each associated with one of the com- 

40 parators and each adapted to be set in accor- 
dance with the output condition of its one of 
said comparators, and delay means whereby 
the setting of the appropriate one of the 
toggles is delayed from the time at which the 

45 majority decision output is produced by a 
period less than the period between two suc- 
cessive signals to be monitored. 

An embodiment of the invention intended 
for use as part of the central system of an 

50 automatic telephone exchange will now be 

5 described with reference to the accompanying 
drawing. 

The data processing system in which the 
, circuit shown in the drawing is used in a 

55 processor-controlled telephone exchange in 
which the main processing units are tripli- 
cated. For each processing operation to be 
executed, a majority decision operation is per- 
formed on the output of the triplicated unit in 

60 question, and the results of that operation are 
taken as the correct result. The circuit shown 
deals with the output signals SI , S2 and S3 
from the three separate security sections of 
each such unit, and it is assumed that each 

65 signal S1, S2 and S3 is either 1 or 0. 



The signals S1, S2 and S3 are applied to a 
majority decision gate 1 which performs the 
majority decision vote and gives an output 1 
or 0 accordingly. The signals SI, S2, S3 are 
70 also applied to three comparators 2, 3 and 4, 
respectively, where they are compared with 
the majority decision output S. If any of these 
signals differs from the signal S it is assumed 
to be faulty. That is, one or other of the fault 
75 signals F,, Fa and Fg would assume an O 
condition. Thus the effective output from any 
of these comparators is 1 in the presence of a 
fault, because the outputs are "not" outputs. 
The fault outputs F,, F2 and F3 are "or-ed" in 
80 the gates 5 and 6, of which 5 is a NAND gate 
while 6 acts as an inverter. Thus the output 
from gate 6 is the inverse F of a fault signal. 
Hence if a fault is detected we get a signal 
which positively indicates that a fault has in 
85 fact occurred. 

The output S from the majority decision 
gate 1 is also applied to a gate 7, which 
responds to a transition in the output from the 
gate 1 , and after the occurrence of that transi- 
90 tion enables a binary counter 8. This counter 
then starts counting the FAST CLOCK pulses, 
whose pulse rate is at least four times as great 
as the maximum possible rate at which transi- 
tions in S can occur. With the outputs being 
95 monitored single bits, which occur serially, 
FAST CLOCK is therefore at least four times 
the operational bit rate of the system. 

After a preset number of FAST CLOCK 
pulses have been counted, the counter 8 

100 generates a sample pulse P. This pulse is 

applied via a gate 9 to the LOAD input of the 
counter 8, which is thereafter reset to make 
the counter ready to respond to the next 
transition in S. The pulse P is also applied to 

105 a toggle 1 0, which thus "remembers" the 
last state of the signal S. Its output is con- 
nected to the gate 7, which is a comparator. 
Thus gate 7 compares the current state of S 
with the last state thereof, so that it responds 

1 10 to any transitions in the signal S. 

As already indicated, the signal F goes low 
when a fault is detected in respect of any one 
of the Si, S2 or S3 signals. The F output from 
the gate 6 is applied to a current 11-12-13. 

115 being applied via a gate 1 2 to the toggle 1 3: 
this, with the toggle 1 1 is a fault store. Hence 
the fault indication is stored. 

When the sample pulse P, which occurs 
shortly after the signal F, occurs it sets the 

1 20 toggle 1 3, which then stays set for the next 
two transitions of the signal S. This follows 
from a consideration of the operations of 
these circuit elements, as indicated above. 
We now return to a consideration of the 

1 25 fault signals F, Fj or F3: these signals are also 
applied to gates 14, 15 or 16 respectively, 
these gates also being controlled from the 
output of the toggle 1 3. Now if any of these 
signals goes low during the next two transi- 

1 30 tions of S, the corresponding gate 14, 1 5 or 
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16 develops a logic 1 signal. This logic 1 
signal is then stored in the corresponding one 
of the toggles 17, 18 and 19. Any one of 
these toggles being set gives an indication 
5 that a fault has been detected, and aiso ^ 
Indicates which one of the signals is at fault. 

Thus the circuit not only Indicates that a 
fault has occurred, but introduces a small ^ 
delay into the giving of that indication. This 
1 0 means that a fleeting fault which is in most 
cases relatively harmless, can be ignored. Jt 
ignores occasional faults which occurs be- 
tween two consecutive transitions of the sig- i 
nal S being monitored. However, by virture of 
1 5 the three toggles 17, 18, 19 and the manner 
of their control they staticise the fault condi- 
tion. This enables the detection of many dor- 
mant faults, i.e. when one of the triplicated 
signals gets ^'stuck" in one logical condition, 
20 and aiso when two or more faults are seen in 
three consecutive signal transitions. However, 
internal faults within the inputs of element 1 
will not be detected. Note also that the signals 
being monitored may be periodic or non- 



CLAIMS 

1 . A fault detection and indication circuit, 
which tncfudes a majority decision circuit to 

30 which three nominally identical versions of the 
same signal are applied and which gives a 
majority decision output in respect of each 
said signal, a set of comparators each of 
which compares the majority decision output 

35 with a different one of the three versions of 
the signal, so that if one of the versions differs 
from the majority decision output then the 
appropriate one of the comparators gives an 
output which indicates which version is at 

40 fault, a set of output toggles each associated 
with one of the comparators and each adapted 
to be set in accordance with the output condi- 
tions of its one of said comparators, and delay 
means whereby the setting of the appropriate 

45 one of the toggles is delayed from the time at 
which the majority decision output is pro- 
duced by a period less than the period be- 
tween two successive signals to be monitored. ^ 

2. A fault detection and indication circuit, 

50 substantially as described with reference to ^ 
the accompanying drawing. J 
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SIGNAL DISCRIMINATING METHOD 



ABSTRACT : PURPOSE: To remove an unnecessary non-synchronous signal such as a fruit response 
signal or random noise without damaging a normal response signal, by comparing an 
arrival receiving signal with a previous receiving signal by plural cycles from said receiving 
signal and taking the majority of said receiving signals. 

CONSTITUTION: A receiving signal is branched into two to be inputted to a majority logic 
circuit 5 through a circuit wherein shift registers 3, 4 for transiferring one of the branched 
signals on the basis of a shift clock pulse to delay the repeated cycle of a question signal 
by one cycle are connected in series, and the other branched receiving signal and a part 
of the output of the shift register 3 are respectively inputted to the input terminal of the 
majority logic circuit 5 to obtain a normal signal from the output terminal of the majority 
logic circuit 5. Since signal discrimination is performed on the basis of the majority 
decision of the signal during reception and the signal previous by several cycles, a 
non-synchronous signal such as a fruit response signal can be excluded by simple circuit 
constitution without lacking the normal signal. 
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ABSTRACT : PURPOSE: To eliminate noise without causing the reduction in fan-out, reduction In the 
mount density and any cost-up by providing a delay circuit outputting plural delay signals 
and a logic circuit taking majority decision logic of plural delay signals and giving an 
output. 



CONSTITUTION: A delay circuit 10 gives delays of '0*, At and At2 to a digital input signal 
to generate three delay signals. A logic circuit 12 takes majority decision logic of the three 
signals. For example, suppose that noise is superimposed on, e.g., a digital signal and the 
signal level is changed momentarily to a high level, then the high level is given to the logic 
circuit 12 as it is and delayed by At and At2 the result is given to the logic circuit 12. As a 
result, when one of inputs to the logic circuit 12 is at a high level, the other two inputs are 
at a low level without fail. Thus, the majority decision logic results in a low level. The noise 
is eliminated from the input signal as the output of the logic circuit 12. 
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